Digital Forensic Analyst (m/w/x)

At ZEISS, we are committed to stepping beyond our comfort zones to achieve outstanding results through innovation. Our spacious and modern work environment fosters expert knowledge and teamwork, supported by a unique ownership structure and the long-term goals of the Carl Zeiss Foundation. As part of our Corporate Information Technology (CIT) team, you will contribute to developing and implementing innovative security solutions that enhance efficiency and competitiveness across the Carl Zeiss Group. We value diversity and invite applications from individuals of all backgrounds.

Requirements

- Degree in Computer Science, IT Security, or a related work experience.

- At least 5 years of experience in digital forensics, information security incident response, or cybersecurity.

- Strong knowledge of relevant best practices, laws, and regulations related to digital forensics and cybersecurity in the EU, such as NIS2 Directive.

- Hands-on experience in analyzing digital evidence, including Windows and iOS mobile forensics.

- Proficiency in forensic tools such as Exterro FTK Imager, Nextron THOR, Velociraptor by Rapid7, or Magnet Axiom.

- Strong understanding of network protocols, malware analysis, data recovery, analytical skills, structured work approach and problem-solving competence.

- High level of self-motivation, results-oriented mindset.

Responsibilities

- Conduct digital forensic investigations in the context of information security incidents, ensuring thorough and accurate analysis.

- Collect, preserve, and document forensic evidence in accordance with industry standards and legal requirements.

- Reconstruct and analyze security incidents using advanced forensic tools and techniques.

- Support the Cybersecurity Incident Response Team (CSIRT) with expert insights during incident detection, analysis, and remediation.

- Perform proactive threat hunting by analyzing network traffic, log data, and endpoint activities to detect indicators of compromise (IoCs) and hidden threats.

- Create detailed forensic reports and present technical findings clearly to internal stakeholders, including risk and legal teams.

- Work closely with internal IT and security teams to drive improvements in post-incident security measures and architecture.

- Deliver training and awareness sessions on digital forensics best practices, including for SOC Level 2 Analysts and other security stakeholders.

- Continuously assess and enhance forensic methodologies, tools, and workflows to improve investigation quality and efficiency.